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SYSTEM AND METHOD OF THEFT PREVENTION FOR AN ELECTRONIC DEVICE 

BY LOWERING QUALITY-OF-SERVTCE 



This invention relates to a system and method for lowering or "locking" one or 
more Quality of Service (QoS) parameters of an electronic device to make the electronic 
device unattractive as a theft target More particularly, the system and method of the present 
invention lowers or "locks" at a low level at least one QoS parameter of an electronic device so 
that the device functions below its normal quality of service and can be considered to be non- 
functional, thereby rendering the device unattractive as a theft target 

There are more and more electronic devices being developed and finding a ready 
market such as Laptops, Game-Consoles, Personal Digital Assistants (PDA), Mobile Phones, 
Storage Containers, Digital Cameras, etc. These electronic devices are quite attractive theft 
targets as they are easy to remove and carry and difficultto identify as having been stolen from 
their outward appearances. 

One commonly used approach is to somehow control access to the functionality of 
electronic devices in order to discourage theft of such devices. Such access control is 
especially applicable to personal portable electronic devices and several control techniques 
have been developed. In addition to controlling access, lowering power consumption is 
another very desirable goal for such portable devices, in order to conserve on-board battery 
power. 

Japanese patent application publication no. JP-2001 175368 A to Masanobu, teaches 
conserving battery power by low-powering a PDA by lowering the CPU clock frequency by 
a factor of 2 so that power consumption is lowered at initial start-up and during the initial 
memory data initialization phase. A user has no control over lowering the frequency and 
QoS is neither a goal nor is it affected in any way. 

Japanese patent application publication no. JP-05035689 A to Yukio, teaches a 
hardware card inserted by a user to identify the user as authorized for access, a special 
function that reads the inserted card and interrupts all or a part of the system power ofa 
portable computer if the user is not authorized for access. A user does not provide an 
authentication input and service interruption rather than QoS degradation is taught by 
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Yukio. 

Japanese patent application publication no. JP-09284691 A to Mitsuhiro, teaches 
theft prevention by password protection wherein for a video camera the image quality, a 
QoS item, is degraded over time by a CPU until a correct password is entered. The 
password protection is enabled only by turning off the video camera off (power off), when 
the video camera enters a protected mode until, at power up, a correct password is entered. 
Mitsuhiro teaches part or all of a picture is scrambled or made missing in the protected 
mode. 

Web site www.insighNsecurity.com offers a "PC Access" product which combines 
an RF reader that is plugged into a computer, transmitter tags worn by authorized users, 
and software to control unauthorized access by monitoring proximity of at least one 
authorized user, immobilizing the computer when there is no authorized user and resuming 
normal processing when an authorized user comes within transmission range (and is 
wearing a transmitter tag). 

Caveo Technology offers Caveo Anti-Theft, a software/hardware combination 
employing a tiny motion sensor installed somewhere in a PC. Caveo Anti-Theft operates 
by detecting motion, analyzing it to determine whether a Ihreat exists, and implementing 
responses. Caveo Anti-Theft is independent of the computer operating system and operates 
whether the laptop is on or off. A password input is required to turn the laptop back on, 
i.e., to make the functions of the laptop available again, once the alarm has been activated 
by some extreme motion of the laptop. 

These prior art theft and access prevention approaches require various types of 
modifications to the hardware and software of the devices being protected that are not 
appropriate for a broad array of portable electronic devices. 

Thus, there is a need for a theft prevention solution that applies equally to all types of 
electronic devices, ranging in size from a PDA to a television, a solution that maintains the 
advantages cost and number of parts of these electronic devices. 

The present invention provides theft prevention and applies to all electronic devices 
comprising a means to accept authentication information input (such as a password or a 
fingerprint), store pre-set authentication information, validate the input using a sequence of 
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authentication instruction, by way of example and not limitation, against the pre-stored 
authentication information and initiate QoS at a level commensurate with the result of this 
validation, i. e., to maintain a "lock" or "unlock" the QoS parameters) associated with the 
authentication input The present invention is applicable to such electronic devices as 
5 Laptops, PDAs, Game-Consoles, portable DVD-players as well as televisions, car radios, 
graphics terminals, and other electronic devices comprising means to accept and validate 
authentication information inputs against pre-stored authentication information using 
sequences of authentication instructions in the electronic device. The general idea is to 
make these electronic devices less attractive for robbery by incorporating in them a means 

10 to lower or "lock" one or more QoS (Quality of Service) parameters of the device to a 

previously determined "locked" state after some number of low-power modes (e.g., after a 
pre-set (e.g. 5) or a variable number of standby, or power-off modes). The normal or 
"unlocked" state of the QoS parameter(s) can be regained when the device is "unlocked" 
after acceptance and validation of authentication information. 

1 5 One embodiment of the present invention uses clock frequency as such a QoS 

parameter by lowering or "locking" at a lower level the effective (internal or external) 
clock frequency (the QoS parameter) of an on-board CPU (e.g. via phase-locked loop 
(PLL) or clock divider), in one embodiment when it is powered-off or, in the case where a 
CPU is never switched off, when it runs at a very low clock-speed or the CPU-load is 

2 0 below a certain threshold (e.g. 5%) for a certain amount of time (e.g. 1 minute). It should 
be noted that the term CPU used herein is meant to cover pure CPUs, chips that are a mix 
of analog circuitry, digital circuitry, (programmable or not) glue logic, and zero or more 
CPU-cores (e.g. ARM, MIPS, x86, ...). Other embodiments lower some other QoS 
parameter for the electronic device, e.g., picture quality of a television or sound quality of a 

2 5 stereo or radio. 

In a preferred embodiment, existing components are modified to perform the automatic 
QoS parameter "locking" at low-power mode and Unlocking" upon acceptance and validation 
of authentication information, as described above. Alternatively, additional control 
components are provided to perform the automatic QoS parameter "locking" at low-power 

3 0 mode and "unlocking" upon acceptance and validation of authentication information, as 

described above. Thus, the present invention is both simple and very safe. It is safe because 
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the different "parts" of the "lock" (e.g., the PLL and the storage and the comparison logic) are 
in the same chip. If physically different components were involved, these different 
components would have to communicate with each other, and that is easier to interdict Inside 
a chip, this is "impossible". 

FIG. 1 illustrates a process flow for an embodiment of the present invention in which 
boot-up of a portable device uses a control component modified according to the system and 
method of the present invention. 

FIG. 2 illustrates components required to implement the process illustrated in FIG. 1 

The present invention is a system and method such that when an electronic device is 
powered-off or enters a low-power level mode, at least one QoS parameter is "locked" at a 
degraded level and when the electronic device is taken out of this low-power level mode, the 
"locked" state of this at least one QoS parameter is maintained until pre-set authentication 
information is accepted and validated to "unlock" it or partially unlock it. 

In a preferred embodiment, apre-set authentication information is stored within an on- 
board control component such as a CPU, microprocessor, digital signal processor (DSP), 
application-specific integrated circuit (ASIC), programmable logic device (PLD), and field 
programmable gate array (FPGA) in a non-volatile memory (e.g. NOR flash or NAND flash or 
MRAM or FRAM) inside the control component and is associated with the QoS parameter of 
control component clock frequency. The locking and unlocking of access to a normal control 
component frequency can be enabled from a low power mode of the device containing the 
control component. In this embodiment, it is assumed that the control component has an on- 
board clock-divider (or PLL or similar functioning component) which at low-power mode puts 
the internal frequency of the control component to a low frequency, i.e., "locks" this QoS 
parameter at a low level. Alternatively, a control component is provided, such as a CPU, 
microprocessor, digital signal processor (DSP), application-specific integrated circuit (ASIC), 
programmable logic device (PLD) and field programmable gate array (FPGA). However, this 
"lock" frequency must be high enough to allow input of the authentication information (e.g., 
from a keyboard, or from a remote control device, or biometric device (fingerprint or eye- 
scan), which in practice means it can be very low. Once input, the authentication information 
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is compared to the internal (hidden) authentication pre-stored in the control component and in 
case of a match, the control component turns its internal frequency higher, i.e., "unlocks" this 
QoS parameter, hi case of a mismatch, the internal frequency (QoS parameter) of the control 
component remains low, i.e., "locked", and the whole system remains very slow, i.e., "locked" 
5 (too slow to run the applications the device containing the control component was intended 
for). This should discourage theft of the electronic device that is exhibiting slow or "locked" 
operation. 

FIG. 1 illustrates a preferred embodiment of an "unlock" sequence. At step 100 the 
"unlock" procedure is performed for each "locked" QoS parameter by deterrnining if 

1 0 authentication information has been input at step 1 10, comparing the input authentication 
information to corresponding stored pre-set authentication information at step 120 and 
"unlocking" the QoS parameter at step 130 or otherwise continuing the "locked" state of the 
QoS parameter. In this way subsets of QoS parameters might be made unavailable on a 
selective basis and, furthermore, multiple authentication information inputs can make it more 

1 5 difficult to compromise protection of this type, i.e., guess the authentication information to be 
input, than a single input. For example, some function of an electronic device is to be made 
available on a limited basis, e.g., hard drive or Internet access. 

FIG. 2 illustrates the system and method of the present invention as applied to multiple 
internal frequencies 220 which can each be set to a sufficiently low state so as to achieve a 

2 0 poor QoS for each of the frequencies and the quality of service of their associated functions. 
Authentication information can be associated with each said internal frequency and pre-set 
authentication information is preferably stored in the control component's on-chip non-volatile 
memory 230 but can also be stored in external memory (such as NOR flash, NAND flash, 
EEPROM, MRAM, etc). Many control components (such as the CPUs on a motherboard of a 

2 5 PC) can functionally operate at many frequencies. In a preferred embodiment the external 

clock frequency (the4MHz) cannot be driven up by aboutthe same factoras the division factor 
in "locked QoS mode so that a thief cannot turn up the external clock frequency (by the same 
factor) to work around the protection provided by the present invention. In an alternative 
embodiment, the control component has additional circuitry/control logic to check that the 

3 0 external clock speed has not been driven up. 
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In another embodiment, the system and method of authentication information protected 
QoS parameters of the present invention are applied to a graphics chip. In this embodiment, 
the video resolution (number of pixels and lines) and/or color depth (e.g., 24-bit RGB) and/or 
refresh-rate (e.g. 90Hz) is set to a low or "locked" state (e.g., 320x200 pixels, 256 colors, 
60Hz) with a corresponding authentication information enabled high or "unlocked" state (e.g., 
1024x768 pixels, 24-bit RGB, 90Hz). 

In another embodiment, the system and method of authentication information protected 
QoS parameters of the present invention is applied to a television set, or a device intended to 
be attached to a television set (such as a cable or satellite set-top-box decoder, or a digital or 
analog video-recorder/player). In this embodiment, the authentication information is entered 
via the remote control devices, and the low QoS or "locked" state comprises for example a 
black and white picture or alternating low/high Quality (e.g. 2 seconds low-Q, 2 seconds high- 
Q), which makes it much easier to detect a theft, and/or no sound or mono instead of stereo, or 
sound from only one speaker, or sound from alternating speakers over time (e.g. left for 2 
seconds, right for 2 seconds), and/or other features (such as 100Hz TV), and authentication 
information enabled QoS or "unlocked" state comprises a normal color picture with sound. In 
this embodiment, the pre-set authentication information is preferably stored inside the main 
chip on the motherboard. 

Alternatively, there is not just a "locked" state at low QoS, or and "unlocked" state at 
high QoS, but "locked" can also mean "alternating between low QoS and high QoS, in a way 
that is very annoying and precludes theft, and is very easy to detect. 

In another embodiment, the system and method of authentication input protected QoS 
parameters of the present invention is applied to a stereo or a stereo cassette player or 
CD/DVD player or an MP3 player or an audio player with a Hard Disk Drive, wherein the 
authentication input can be made via buttons and the lower or "locked" QoS comprises 
monaural sound or normal sound with synthetic noise added. In this embodiment the control 
component controlling the sound output stores the pre-set authentication information and 
added functionality to perform the QoS locking and unlocking, by way of example, a sequence 
of authentication instructions. Alternatively, the pre-set authentication information can also be 
stored in external memory (such as NOR flash, NAND flash, EEPROM, MRAM, etc). 
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In anolher embodiment, the system and method of authentication input protected QoS 
parameters of the present invention is applied to a modem with authentication information 
stored internal to the CPU or microprocessor or Digital Signal Processor (DSP) or application- 
specific integrated circuit (ASIC) and the locking and unlocking being accomplished with 

5 respect to the QoS parameter of rate of data throughput Alternatively, the pre-set 
authentication information can also be stored in external memory (such as NOR flash, NAND 
flash, EEPROM, MRAM, etc). 

In all embodiments, the system and method of the present invention maintains an 
obviously "locked" mode when valid authentication information has not been supplied and mis 

0 "locked" mode of operation is obvious to any potential thief, a potential buyer of stolen 
electronic goods protected with the system and method of the present invention, and to law 
enforcement personnel. 

The foregoing description of exemplary embodiments of the present invention has been 
presented for the purposes of illustration and description. It is not intended to be exhaustive or 

5 to limit the invention to the precise embodiments disclosed. Many modifications and 
variations are possible in light of the above teaching. It is intended that the scope of the 
invention be limited not with this detailed description, but rather by the claims appended 
hereto. 
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